Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a77c0351-7a7f-3776-9d62-10d612541403.roa
File:                     a77c0351-7a7f-3776-9d62-10d612541403.roa (raw, json)
Hash identifier:          K99+ts2GKh5Is+TsOUrmNuHS6OOMNLWmS6LYVHRcIe0=
Subject key identifier:   FA:63:F3:96:C8:52:4C:EF:8E:6A:C1:0C:05:45:8B:5E:8A:29:E7:7E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1465897CC154978A9DF3F600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a77c0351-7a7f-3776-9d62-10d612541403.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     7342
IP address blocks:        192.34.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:89:7c:c1:54:97:8a:9d:f3:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=16bcf39d-5415-4f72-9e15-c6fdf609fc61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b3:94:8c:e2:1c:4b:3b:76:ba:ed:15:43:4a:
                    bd:92:5d:75:46:38:88:ba:b1:08:aa:e8:2d:eb:2a:
                    bf:96:35:4b:2a:12:48:00:39:6d:10:e5:a7:95:4a:
                    74:83:ec:0a:82:43:58:89:58:08:68:57:68:f4:a5:
                    b1:b4:2d:2f:e6:9b:64:dc:73:76:a7:26:61:ac:61:
                    68:27:ee:80:01:5b:a1:03:90:b9:69:4b:24:f9:6f:
                    ce:8a:e6:7e:db:01:42:21:5d:b1:bb:a2:7d:7c:95:
                    74:de:11:55:68:a2:6d:a7:b2:6a:50:6f:10:c0:7f:
                    18:86:18:f5:e9:ca:dd:1d:d7:75:ba:bd:de:4b:32:
                    45:d4:86:9a:3b:88:a9:1c:56:20:22:b9:de:7c:fb:
                    0a:f4:26:ef:00:24:47:e4:ef:02:81:cd:b2:a4:d8:
                    32:0c:8e:63:ed:f0:68:60:5a:1e:7f:0d:1e:64:d6:
                    26:eb:03:21:ed:0f:39:11:9d:b2:41:85:2d:74:c5:
                    57:33:ca:37:8e:95:38:88:c0:46:9c:ef:7a:3f:90:
                    1a:7c:27:50:fa:aa:20:39:47:dc:ed:45:52:52:05:
                    0c:88:ab:6a:64:b7:68:21:e1:da:3e:ea:3e:08:4f:
                    1b:ed:64:bf:c7:47:72:51:c5:43:b5:73:3f:91:a8:
                    62:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:63:F3:96:C8:52:4C:EF:8E:6A:C1:0C:05:45:8B:5E:8A:29:E7:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a77c0351-7a7f-3776-9d62-10d612541403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:72:41:ea:eb:eb:c3:ae:50:1f:fa:0c:58:49:4b:e5:3a:70:
         7c:51:19:65:62:0a:1b:97:a7:f4:96:e0:60:fc:86:18:e2:1c:
         2a:5b:16:4a:fc:53:0f:32:a6:68:c5:2d:64:3a:30:1d:62:3d:
         ab:43:fb:ed:4e:77:77:31:f9:22:a6:1b:e6:a4:2c:45:36:87:
         e7:79:0a:dd:e0:e2:be:b1:95:f7:67:4b:9e:40:8a:a5:08:ce:
         1b:0e:db:b1:94:2b:f5:53:b5:d4:cd:d7:a0:4b:1b:84:e2:81:
         6b:31:17:9b:16:e6:73:53:e9:45:cc:88:18:26:61:b0:04:b6:
         8c:6e:37:0c:aa:cd:57:cd:22:72:d5:85:46:c5:4c:b0:5d:c0:
         dd:2c:65:9d:95:5a:43:8c:26:3a:79:5c:79:b9:d6:9c:8b:1d:
         55:cb:45:08:2e:71:8f:32:01:58:54:2f:82:b7:ea:dd:8b:af:
         78:f5:ed:0d:5f:99:b7:e1:66:e4:9f:6a:a7:7d:87:16:41:b3:
         30:10:ce:bc:b9:f3:39:a6:a9:14:32:10:43:90:86:78:f7:be:
         31:31:ff:96:3a:6d:91:26:43:4e:dc:34:c4:94:c8:a9:76:91:
         f4:45:fa:c4:e6:6c:24:48:7f:b9:0a:7e:f2:b6:62:66:6a:97:
         50:b0:c6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:39:49 2025 by rpki-client